S3 Flashcards
Is S3 Object based
Yes!
Is S3 suitable for running an OS or hosting a DB?
No, object storage only
What is the max size of a single file that can be transferred?
5 tb
What is the storage limit in S3?
Unlimited
Is S 3 a universal namespace?
Yes, so it is not tied to regions and must be named completely uniquely from all other s3 buckets out there
What is a Key for S3?
The object name, eg ralphie.jpg
What is a value is S3
The data itself, which is made up of a sequence of bytes
What is a version ID
Allows storage of multiple versions of the same object
What is metadata in S3
Data about the data you are storing, content type, last modified, etc.
Are S3 buckets private by default?
Yes, when created a bucket and all contents are private by default.
You have to allow public access on both the bucket & its objects in order to make them public
When to use an Object ACL?
These are used to make individual objects public
Bucket Policies
Security policy for your bucket and can be used to make an entire bucket public
HTTP Status Code
When you upload and object to S3 & it’s successful you will get an http 200 code
What to know for hosting static websites in S3
Use a bucket policy to make the bucket public
You can only host static content NOT dynamic
S3 automatically scales with demand
What version of an object does S3 store?
All versions are stored in S3. This includes writes and even if it’s deleted
Can versioning be disabled once enabled in S3?
No, once enable versioning can only be suspended
Can lifecycle rules be integrated with a bucket that has versioning?
Yes, life cycle rules can be integrated and MFA is supported as well
S3 Standard Storage Tier
99.99% available
11 9’s durable
In > or =to 3 AZs
Suitable for most workloads (website, content distribution, mobile gaming, gaming apps, and big data)
S3 Std. IA Storage Tier
99.99% Available
11 9’S durable
> = 3 AZs
Long term infrequently accessed critical data. Backups, data store for disaster recovery files, etc
S3 1 Zone IA Storage Tier
99.5% Available
11 9’s durable
1 AZ
Long term infrequently accessed data that is non critical
S3 Glacier Storage Tier
99.99% available
11 9’s durable
> = 3 AZs
Long term data archiving that occasionally needs to be accessed within a few hours or minutes
S3 Glacier Deep Archive Storage Tier
99.99% available
11 9’s durable
> = 3 AZs
Rarely accessed data archiving with a default retrieval time of 12 hours
S3 Intelligent Tiering
99.99% available
11 9’s durable
> = 3 AZs
For unknown or unpredictable access patterns
What is S3 lifecycle manage,ent used for?
Automates moving objects between different storage tiers
Can be used in conjunction with versioning
Can be applied to current and previous versions
What is S3 object lock?
Object lock is used to store objects using the worm model, write once read many
Can be applied to individual objects or across a bucket as a whole
Comes in Governance Mode and Compliance Mode
What is object lock governance mode?
Users can’t overwrite or delete an object version or alter its lock settings without special permissions
What is object lock compliance mode?
A protected version can’t be overwritten or deleted by any user, including the root user
Glacier Vault Lock
Allows easy deployment and enforcing of compliance controls for individual S3 glacier vaults with a vault lock policy.
You can specify controls such as WORM in a vault lock policy & lock the policy from future edits. Once locked the policy can’t be changed
S3 Encryption In Transit
Uses SSL, TLS, HTTPS
S3 Encryption @ Rest (needs further review)
Server Side Encryption
SSE-S3 (AES 256 bit)
SSE-KMS
SSE-C
Client Side Encryption
You can choose to encrypt files before uploading them to S3 with your own encryption tool
Can you enforce encryption with a bucket policy?
Yes, a bucket policy can deny all PUT requests that don’t include the ‘X-amz-server-side-encryption’ parameter in the request header
What are prefixes and why are they important?
Prefixes are the sub folders in an s3 bucket (they come after the bucket name)
They are important because the more prefixes you have the better performance your bucket can have due to it being able to handle more requests at once
What number of requests per second can you get with prefixes?
3500 put/copy/post/delete requests a seconds
and
5500 get / head requests per second per prefix
Performance Limits with KMS
Uploading and downloading count towards your KMS quota
Requests per second is region specific and can be 5500, 10000, or 30000
You cant request a quota increase on KMS atm
Why use multi part uploads?
To increase performance when uploading files to S3
Multi-part uploads should be used for files over 100 mb and must be for files over 5gb
When to use S3 byte range fetches?
Use S3 byte range fetches to increase performance when downloading files to S3
What is S3 bucket replication / cross region replication?
You can use it to replicate objects from one bucket to another
Objects in an existing bucket are not automatically replicated
Delete markers are not replicated by default
